/gg/ - Gentoo General

non-C programs have their own dependencies yeah

Is there anything that prevents emerge --sync from being MITM ?

Google it

trying out full encryption meme
># cyptsetup luksOpen /dev/sda3 name
enter pass phrase and receive this
>device-mapper: remove ioctl on temporary-cryptsetup-14723 failed: Device or resource busy
what do

devmanual.gentoo.org/general-concepts/manifest/index.html

Downloading the official release?

but what stops emerge --sync from downloading manifests for compromised files? maybe emerge --sync downloads manifests from a baddie

Don't I have to install dependencies and stuff?

eudev is a drop-in replacement for udev

I get that the manifests prevent files downloaded from mirrors from being tampered with, and ensures they match the portage tree. But what ensures we are getting a good portage tree?